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This page is for OPH-CNE staff to add requirements 
for STARGATE. You should start by reading the 
Endpoint Initiative Requirements . Your requirement 
may have already been captured. 

Some headings have been added to get you started.... 



Contents 

• 1 How should the file system be rendered? 

• 2 How do you want to search the file system? 

• 3 How do you want to get tasked by 
customers? 

• 4 What should appear on the summary pages? 
What about summary pages for a Project or 
Implant? 

• 5 Embedded Comments 

• 6 What would CNE need from Network 
diagrams? 

• 7 What input is most important 
(ipconfig/netstat/dns/arps/....) ? 

• 8 Scripts 

• 9 Visualising non-DareDevil logs 

• 10 Add a new section here! 



r edit! How should the file system be 
rendered? 

• I would like to be able to use STARGATE to 
view the files directly from the S drive. GCHQ 
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has a site wide license for Outsideln 
(QuickView uses this behind the scenes). You 
can convert around ~350 document formats 
into HTML for viewing safely. This is not 
meant to replace udaq but would be a convinent 
and safe halfway-house to view files quickly 

reasons. 



r edit! How do you want to search the file 

system? 

r edit! How do you want to get tasked by 
customers? 

r edit! What should appear on the summary 
pages? What about summary pages for a 
Project or Implant? 

f edit! Embedded Comments 

What form should they take? Do you want to be able to add attachments or hyperlinks. Do you want to be 
alerted when a comment is added to your project? 
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• CNE on the BIG BUS 

Iterations 

• Iteration 7 Feedback 
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f editl What would CNE need from Network diagrams? 
f editl What input is most important (ipconfig/netstat/dns/arps/....) ? 
f editl Scripts 



Incorporate scripts detailed in the TDE wiki into STARGATE, eg; 

• Email project lead (or interested party) when a volume manager event occurs. User 

• Please add more ideas! 




f editl Visualising non-DareDevil logs 

• I need to be able to view logs from unix ops 

• I need to be able to view logs from masquerades (directory listings from FTP servers) 
User —— 

• I need to be able to view logs from ops where i exploit on to the box and just use legspin 
(THICKISH ALPHA) UseriHMHBM 



f editl Add a new section here! 
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